Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c1ff24d-05c7-3384-b982-564dec183f62.roa
File:                     5c1ff24d-05c7-3384-b982-564dec183f62.roa (raw, json)
Hash identifier:          ctFyKVP9h1s4vxitXEV49os9pMwhkJnisEwmBAFH0yE=
Subject key identifier:   5E:EE:11:6C:A9:57:AA:01:94:BD:0A:02:97:A0:AE:86:7D:F6:BE:3C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661AD66D3EA60849A9E1A8E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c1ff24d-05c7-3384-b982-564dec183f62.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        75.88.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1a:d6:6d:3e:a6:08:49:a9:e1:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=6be15a4f-7628-4110-8614-d22a4942f57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:1e:3a:19:fc:b1:72:f5:82:92:27:99:e5:
                    b2:7e:f5:40:e7:42:52:35:9c:56:28:8e:1e:13:b9:
                    8f:cc:3e:b4:28:5f:fb:9b:e5:fe:7d:3e:1e:3c:24:
                    fc:0d:de:83:2b:da:c6:58:1c:3b:68:bd:be:d1:d2:
                    a5:02:50:ba:21:bd:cd:fd:98:3b:ec:02:fc:54:95:
                    ad:06:80:15:9b:9b:b4:50:49:40:da:de:9a:2d:ad:
                    a3:c9:84:1e:84:50:0f:3e:a4:ef:24:cb:8c:7b:5b:
                    69:ef:3c:62:44:e4:d8:b8:1b:26:2c:02:99:ca:2e:
                    a8:41:c8:0e:d7:6a:12:e4:17:c4:8c:a0:88:82:ad:
                    3a:00:de:cb:ce:c4:30:0a:25:9d:2a:ed:82:91:38:
                    4c:17:24:20:f5:c0:1c:64:8e:25:2f:15:0b:55:26:
                    1e:14:d3:46:3e:45:6b:2a:d3:ac:44:73:81:06:6a:
                    9c:14:81:40:c0:a7:db:1a:da:f5:54:5e:6f:40:27:
                    d5:ec:14:6a:08:a0:8b:af:8a:d8:3d:05:b9:ac:98:
                    06:78:c4:73:ca:45:bb:08:f0:3b:e8:c1:47:b0:b7:
                    5f:a8:ed:c2:e6:69:dd:85:c9:76:30:7d:c8:1c:8d:
                    db:58:b1:39:41:28:95:30:69:a9:f6:90:8f:5d:18:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EE:11:6C:A9:57:AA:01:94:BD:0A:02:97:A0:AE:86:7D:F6:BE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c1ff24d-05c7-3384-b982-564dec183f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:97:a6:45:6c:f6:ca:db:42:02:0e:91:88:58:81:e9:3b:49:
         45:ec:9a:dd:48:73:3e:15:01:14:69:f8:37:28:d7:25:db:b0:
         09:87:01:6e:66:1f:10:ad:10:b7:d6:d0:e2:ae:e2:a0:6e:83:
         c6:c2:ba:32:df:37:3d:23:12:2d:92:5b:1e:1c:94:5b:9f:f0:
         cd:1a:2f:70:35:60:34:63:f7:7a:ea:6f:98:e1:3c:c0:2a:75:
         8d:42:1a:50:e9:d0:a7:87:b7:ca:4c:fe:02:6a:2b:ea:b5:41:
         34:bd:2b:62:ab:f3:60:1b:43:fb:10:73:a6:2e:a5:b5:4d:2e:
         45:8e:b4:13:e8:79:7c:17:25:c1:3f:23:01:db:6e:c4:68:72:
         b6:5f:e7:8a:5b:4e:34:df:14:36:68:78:10:97:4f:ac:ad:c1:
         5e:aa:69:29:ce:5d:0b:89:69:b2:dc:45:a0:a0:fa:6c:e8:8a:
         14:3c:aa:73:7a:1f:e5:e8:1a:de:24:b7:12:6b:3d:f5:36:b0:
         31:7d:8d:b8:52:50:02:2c:76:2f:98:e2:8b:a8:c0:e2:01:05:
         d6:55:ee:74:a3:f8:1e:d3:48:ed:5f:7e:2d:d9:1b:b3:1a:75:
         e8:69:40:7d:1c:ed:c2:0c:e6:e4:8b:cb:b4:ff:48:41:2f:3a:
         0e:3c:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----